Privacy Policy
Effective Date: June 4, 2026 · Last Updated: June 4, 2026
1. Introduction
Tovaka Brands LLC, doing business as CoachVault (“CoachVault,” “we,” “us,” or “our”), operates the platform at gymnasticscoachvault.com. This Privacy Policy explains how we collect, use, store, and share information when you use our Platform.
By using the Platform, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Platform.
2. Who This Policy Applies To
This policy applies to:
- Gym Owners and Administrators who create and manage accounts
- Coaches who are invited to access the Platform under a gym's subscription
- Waitlist Subscribers who provide their email to receive updates or lead magnet content
- Visitors to our website
CoachVault is designed for adult users (18+). We do not knowingly collect personal information from individuals under 18. If you believe a minor has provided us with personal data, contact us at hello@gymnasticscoachvault.com and we will promptly delete it.
3. Information We Collect
3.1 Information You Provide Directly
Account Registration
- Name and email address
- Gym name and location
- Account password (stored as an encrypted hash, we never store your plain-text password)
- Role (Gym Owner or Coach)
Subscription and Billing
Payment card information is collected and processed directly by Stripe. CoachVault does not store your credit card number, CVV, or full payment card details. We receive from Stripe: a payment method identifier, last four digits, card type, and billing status.
Communications
- Emails you send to hello@gymnasticscoachvault.com
- Support inquiries
Platform Activity
- Weekly Coaching Pulse responses (scenario selections, class pulse taps, win taps, confidence ratings, written reflections)
- Module completion data and progress through training programs
- Lesson plan generator inputs and outputs
Waitlist and Lead Magnet
- Email address submitted through our waitlist form
3.2 Information Collected Automatically
When you use the Platform, we may collect:
- IP address and general geographic location (country/region level)
- Browser type, operating system, and device information
- Pages visited, time spent, and navigation patterns
- Referring URLs
This information is collected to understand usage, improve the Platform, and diagnose technical issues.
3.3 Cookies and Similar Technologies
We may use cookies and similar technologies to:
- Maintain your session after login (required for Platform functionality)
- Remember your preferences
- Analyze usage patterns
You can disable cookies in your browser settings, though doing so may affect Platform functionality.
4. How We Use Your Information
We use the information we collect to:
| Purpose | Legal Basis |
|---|---|
| Provide, operate, and maintain the Platform | Contract performance |
| Process payments and manage subscriptions | Contract performance |
| Send transactional emails (account confirmations, receipts, password resets, lead magnets) | Contract performance |
| Deliver the Weekly Coaching Pulse and generate Monthly Pulse Reports for gym owners | Contract performance |
| Respond to support requests | Legitimate interests |
| Send product updates, platform announcements, or content we think is relevant to your work | Legitimate interests (you may opt out at any time) |
| Monitor usage for security, fraud prevention, and abuse detection | Legitimate interests |
| Analyze aggregate usage patterns to improve the Platform | Legitimate interests |
| Comply with legal obligations | Legal compliance |
We do not use your data for advertising, we do not sell your data to third parties, and we do not share your information with data brokers.
5. How We Share Your Information
We share information only in the following circumstances:
5.1 With Service Providers
We use third-party services that process data on our behalf:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Stripe | Payment processing and subscription management | stripe.com/privacy |
| Supabase | Database hosting and authentication | supabase.com/privacy |
| Mux | Video hosting and streaming | mux.com/privacy |
| Resend | Transactional email delivery | resend.com/legal/privacy-policy |
These providers are authorized to use your data only as necessary to provide services to CoachVault and are contractually obligated to protect it.
5.2 Within Your Gym Account
Gym Owners can see:
- The names and email addresses of coaches on their account
- Each coach's module completion progress
- Weekly Pulse participation and aggregate response data (through the Monthly Pulse Report)
Individual coach written reflections from the Weekly Pulse are visible to gym owners in the Monthly Pulse Report.
Coaches can see their own progress and their own Pulse response history. Coaches cannot see other coaches' data.
5.3 Legal Requirements
We may disclose information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of CoachVault, our users, or the public.
5.4 Business Transfers
In the event of a merger, acquisition, or sale of substantially all assets, your information may be transferred as part of that transaction. We will provide notice before your personal information becomes subject to a different privacy policy.
6. Data Retention
We retain your account information for as long as your account is active. If you cancel your subscription:
- Your account data is retained for 90 days in case you wish to reactivate
- After 90 days, your personal account data is deleted or anonymized
- Aggregate, non-identifiable usage data may be retained indefinitely for analytics purposes
- Billing records may be retained for up to 7 years to comply with financial record-keeping requirements
Waitlist email addresses are retained until you unsubscribe or request deletion.
7. Data Security
We take reasonable technical and organizational measures to protect your information, including:
- Encrypted data transmission (HTTPS/TLS)
- Encrypted password storage
- Row-level security in our database (coaches can only access their own gym's data)
- Access controls limiting staff access to user data
No data transmission or storage system is completely secure. While we work hard to protect your information, we cannot guarantee absolute security.
8. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal data:
Access: Request a copy of the personal data we hold about you.
Correction: Request that we correct inaccurate or incomplete information.
Deletion: Request that we delete your personal data. We will honor deletion requests subject to our legal record-keeping obligations.
Portability: Request your data in a machine-readable format.
Opt-Out of Marketing Emails: Every marketing email we send includes an unsubscribe link. You can also email hello@gymnasticscoachvault.com to opt out.
Account Deletion: Gym Owners may request full account deletion by emailing hello@gymnasticscoachvault.com. This will also remove all coach accounts under the subscription.
To exercise any of these rights, contact us at hello@gymnasticscoachvault.com. We will respond within 30 days.
9. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: What personal information we collect, use, and share
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out of Sale: We do not sell personal information
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
To submit a verifiable consumer request, contact hello@gymnasticscoachvault.com with the subject line “CCPA Request.”
10. Children's Privacy (COPPA)
CoachVault is a professional tool for adult gym owners and coaches. We do not knowingly collect personal information from children under 13.
Important note: CoachVault content depicts and discusses coaching children in gymnastics classes, but the children themselves are not users of the Platform and do not create accounts. No data about children students is collected by the Platform.
If you believe we have inadvertently collected information from a child under 13, contact us immediately at hello@gymnasticscoachvault.com.
11. International Users
CoachVault is operated from the United States. If you access the Platform from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Platform, you consent to this transfer.
12. Third-Party Links
The Platform may contain links to third-party websites or resources. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by a prominent notice on the Platform before the changes take effect. The “Last Updated” date at the top of this policy reflects the most recent revision.
14. Contact
Questions, requests, or concerns about this Privacy Policy? Contact us:
Tovaka Brands LLC d/b/a CoachVault
Email: hello@gymnasticscoachvault.com
Website: gymnasticscoachvault.com